Heur.NoobyProtect.1 removal guide

The Heur.NoobyProtect.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Heur.NoobyProtect.1 virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Heur.NoobyProtect.1?


File Info:
crc32: 5763FA03
md5: 0dabc4bd6f708f455e686ddb9ee9a851
name: main.exe
sha1: 4b38e2232ee09d87b4a5262afbe576c8014a12cc
sha256: cc482cbc8b8b603a6b0796a741fbee9cc593d0b6835b0cda04ae83d18f26b8ec
sha512: 54521044bf5094c560095bb436dba581433b71007ae5cc2a5455bfb222927fefe4688ca6521a81f29794ed6c480a28e4f1fdf354e2dfadeabb4951284951420e
ssdeep: 49152:Kf3VfSoJozC/MyKObOsemMfj+zPKHKIfKbvfVEr3vAkUnulSv2XyM8OlNTQ:K/VfMf+var3GnQEbOvQ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2013
Assembly Version: 2.13.3.25913
InternalName: Main.exe
FileVersion: 2.13.3.0
CompanyName: Autocom Diagnostic Partner AB
ProductName: ANPCS
ProductVersion: 2.13.3.0
FileDescription: Main
OriginalFilename: Main.exe

Heur.NoobyProtect.1 also known as:

MicroWorld-eScan	Gen:Heur.NoobyProtect.1
CAT-QuickHeal	Trojan.Dynamer
McAfee	Packed-LF!0DABC4BD6F70
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 005239691 )
BitDefender	Gen:Heur.NoobyProtect.1
K7GW	Trojan ( 005239691 )
Cybereason	malicious.d6f708
TrendMicro	TROJ_GEN.R002C0OFM19
Symantec	Trojan.Gen
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Agent-1662447
GData	Win32.Riskware.NoobyProtect.B
Kaspersky	HEUR:Packed.Win32.Blackv.gen
Alibaba	Packed:Win32/NoobyProtect.28029358
NANO-Antivirus	Trojan.Win32.Crypted.eeiuav
AegisLab	Hacktool.Win32.Blackv.3!c
Rising	Trojan.Generic!8.C3 (TFE:4:Y4oPGEtiAmC)
Endgame	malicious (high confidence)
Sophos	Mal/Generic-S
Comodo	Malware@#3vuluajc39ipi
Zillya	Trojan.XPACK.Win32.3
McAfee-GW-Edition	BehavesLike.Win32.Dropper.rh
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.0dabc4bd6f708f45
Emsisoft	Gen:Heur.NoobyProtect.1 (B)
Ikarus	PUA.NoobyProtect
Jiangmin	Trojan.Generic.absbg
Webroot	W32.Malware.Gen
Antiy-AVL	Trojan/Win32.AGeneric
Microsoft	Trojan:Win32/Dynamer!ac
Arcabit	Trojan.NoobyProtect.1
ZoneAlarm	HEUR:Packed.Win32.Blackv.gen
AhnLab-V3	Trojan/Win32.ZBot.C1509101
Acronis	suspicious
VBA32	Trojan.Dynamer
ALYac	Gen:Heur.NoobyProtect.1
MAX	malware (ai score=100)
Ad-Aware	Gen:Heur.NoobyProtect.1
ESET-NOD32	a variant of Win32/Packed.NoobyProtect.G suspicious
TrendMicro-HouseCall	TROJ_GEN.R002C0OFM19
Yandex	Trojan.Agent!RgGcJxNpML0
SentinelOne	DFI – Malicious PE
Fortinet	W32/Generic!tr
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Heur.NoobyProtect.1?

Heur.NoobyProtect.1 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X